]]>
The problem addressed in this project is the lack of centralized, real-time access to personal medical information for patients, and inefficient manual processes in health institutions. To solve this, the application was developed using a modular architecture consisting of a frontend interface built with HTML, CSS, and JavaScript, and a backend implemented in PHP following the RESTful API principles. The backend is organized into DAO, service, and route layers, and communicates with a MySQL database.

Advanced features include two-factor authentication (OTP via email or SMS), Google OAuth login, hCaptcha bot protection, and secure password checks using the HaveIBeenPwned API. Role-based access control (RBAC) was implemented to ensure that patients and doctors access only the data relevant to their role. The application also includes validation of phone numbers and email domains (TLD and MX records), and follows modern web security practices.
The result is a responsive and secure web application that streamlines interaction between patients and healthcare providers, improves the organization of medical data, and enhances user experience. Testing has confirmed that the system performs reliably across different scenarios, and offers a foundation for potential integration with official e-health systems
]]>